staging → main: the dpp-web audit remediation - #18

Draft

LKSNDRTMLKV wants to merge 33 commits into

mainfrom

Commits on Jul 28, 2026

docs: correct the access-control model against the primary text
LKSNDRTMLKV
committed
9258cb2

Commits on Aug 20, 2026

docs(landing): disclose scan telemetry on the trust page as an aggregate per-passport-per-day count with no scanner-identifying field
LKSNDRTMLKV
committed
44bd73f
chore: ignore local-only asset and tooling directories so they cannot be committed to a public repo
LKSNDRTMLKV
committed
afcfee6
chore(docs): resync the vendored OpenAPI spec from the engine, dropping a removed product-category schema and an internal decision-record reference from published content
LKSNDRTMLKV
committed
6f099aa
docs: withdraw the electronics page and its claim of an ESPR delegated act that does not exist, and correct the ESPR sector table's electronics basis and unsold-goods article
LKSNDRTMLKV
committed
5a1cf5e
chore: add link and leakage gates, restate private-repo pointers inline, and give the docs site the headers and robots file the landing site already had
LKSNDRTMLKV
committed
d164a96
Merge branch 'chore/resync-openapi' into chore/ci-gates
LKSNDRTMLKV
committed
4358662
chore: untrack local-only asset and tooling directories that were staged in error
LKSNDRTMLKV
committed
d406c6d
Merge branch 'chore/ignore-local-assets' into chore/ci-gates
LKSNDRTMLKV
committed
840e3f6
ci: run the link, leakage and API-spec gates on every change, and scope the workflow token to read-only
LKSNDRTMLKV
committed
68ed727
Merge branch 'docs/retract-electronics-act' into docs/claim-families
LKSNDRTMLKV
committed
bd98b84
Merge branch 'docs/access-control-primary-text' into docs/claim-families
LKSNDRTMLKV
committed
24d626f
docs: correct the regulatory citations, security-property claims, registry status and access vocabulary against primary text and engine source
LKSNDRTMLKV
committed
ff5e7bb
docs: publish licensing without a restated dependency-licence table, retract the unverified standards-conformance claim, and correct the remaining landing and roadmap claims
LKSNDRTMLKV
committed
3a8a71c
chore(docs): resync the vendored API spec to pick up the corrected credential-standard version
LKSNDRTMLKV
committed
ec48fe3
chore(deps): upgrade both sites to Astro 7, migrating the Starlight social config and the deprecated zod re-export
LKSNDRTMLKV
committed
8b430ec
ci: fail the build on a critical dependency advisory
LKSNDRTMLKV
committed
8a734c0
ci: pin the vendored API spec to an explicit engine commit so the drift check is deterministic and cross-repo changes are not deadlocked
LKSNDRTMLKV
committed
9f3c7e5
Revert "chore(docs): resync the vendored API spec to pick up the corrected credential-standard version"
LKSNDRTMLKV
committed
bbea8d8
Merge branch 'docs/retract-electronics-act' into staging
LKSNDRTMLKV
committed
73bbd1c
Merge branch 'docs/access-control-primary-text' into staging
LKSNDRTMLKV
committed
97890af
Merge branch 'docs/claim-families' into staging
LKSNDRTMLKV
committed
dd1f1db
Merge branch 'docs/remaining-claims' into staging
LKSNDRTMLKV
committed
8e0f5f6
Merge branch 'chore/astro-7' into staging
LKSNDRTMLKV
committed
9a4c526

Commits on Aug 28, 2026

chore(docs): resync the vendored OpenAPI spec
LKSNDRTMLKV
committed
e5311fb

Commits on Sep 13, 2026

chore(docs): sync the vendored OpenAPI spec to engine v0.13.0
LKSNDRTMLKV
committed
056eb05

Commits on Sep 19, 2026